Skip to content

[JENKINS-716] system log not secured #23975

Description

@jenkins-infra-bot

When security is enabled unauthenticated user can view system log when pointing
the browser to "/log".

Not in my case but that could lead to revealing sensitive information.


Originally reported by akostadinov, imported from: system log not secured
  • assignee: kohsuke
  • status: Closed
  • priority: Critical
  • component(s): other
  • resolution: Fixed
  • resolved: 2007-08-08T09:05:48+00:00
  • votes: 0
  • watchers: 0
  • imported: 2025-12-08
Raw content of original issue

When security is enabled unauthenticated user can view system log when pointing the browser to "/log".

Not in my case but that could lead to revealing sensitive information.

  • environment: Platform: All, OS: All

No activity

Activity on this issue will appear here.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions